A858DE45F56D9BC9 archive

201210260043 123xqm

explained decrypted filler

3DES(name+title) ECB, 38 GUIDs, seed 190

Metadata

Post ID
123xqm
Title
201210260043 → 2012-10-26 00:43 on A858's clock
Posted (UTC)
2012-10-26 04:43:22
Timezone
UTC−4 · title 00:43 against posted 04:43 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210260043) = 401b2af52aaa03650ba643c5f8cf38f8 (name+title)
New here
Missing from the community archive; decrypted here for the first time. (new results)
GUIDs
38
Filler GUID seed
new Random(190).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
35 · predicted N = 38 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
arctic-shift · body from arctic-shift
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210260043 (name+title). Key = MD5(password) = 401b2af52aaa03650ba643c5f8cf38f8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 81df0e24-63f9-8318-8d9e-06964adc7d8a
  2 ef2a4fc4-2459-5d91-9c1e-d89646a1a216
  3 f7a22a46-ea07-5a67-924d-00af81c7fd7a
  4 17679205-47f2-1ac0-a41a-67e9bbf2624e
  5 e8872f06-7947-8b62-8d30-8c923d8f3907
  6 36ccb4c4-863a-56d6-914b-d638e2d2995d
  7 def4dd68-5868-0ad9-ba13-63da0da04934
  8 43da447e-47f1-642c-9c13-e8e8048bf23c
  9 41329ad8-c94a-4043-ba77-e3dc71e72cbe
 10 5dce1fbb-5f7b-32e9-bfb7-8d8829b4657d
 11 c45528ee-7209-2b53-8abf-90cfd52d16af
 12 101b501b-13e2-7644-8a49-5a3d21b74fb2
 13 f5ad0980-5ee2-222c-a1bb-0f65322656ca
 14 dea51141-76c8-207e-8557-8a8f488c8830
 15 011a1780-e9ea-888a-98ff-93345139667e
 16 639a163d-b210-611b-9ad6-689cbcea6bf6
 17 8eecf268-4a02-6866-92a0-4e9e0a25b427
 18 d222a456-0c4b-748e-ac66-1827be50cf91
 19 69534cb4-55c8-7c0f-acd6-307859adf80b
 20 9f5ddb31-a262-7329-a7b7-6bd4cf7a23ce
 21 cd9e8ae4-2065-0de1-aa1b-5224d9122914
 22 c2d27c4f-aa5c-48c9-9ba0-6b682c5c738e
 23 bb97888d-bcf4-0c26-a4b9-1543613ac2b6
 24 203eaebb-eba9-35dc-ad8a-313468314e8b
 25 129c0146-154a-208b-98f5-eb490e6c3fa9
 26 2994d74a-d924-6a85-a619-cf606c3b6ee4
 27 9faa3e54-f142-227c-b400-5fbe5465a25c
 28 6bb6cc54-e345-3e6d-bdf6-2146618e995c
 29 5d620b3f-b943-0320-9e92-e696540ad46f
 30 e1fdfd90-d184-0673-b6ee-a0e596cfa2d7
 31 9abe89c0-95ca-2727-bcce-78fce19b8ba1
 32 000e5f21-b1f5-4a43-aa93-25b5bdb34359
 33 2e0287a9-6eae-6fcd-acbd-fab34c2a61aa
 34 ffa72fd5-3e61-6248-a99f-313001d5e45d
 35 40e39599-f333-8795-810a-e3b91a3225ef
 36 7e877d80-6207-8248-a6b2-13817372bf2f
 37 e4250d2f-1241-38bc-a513-f1977d2497e1
 38 c0cc3607-2056-7b79-923d-ceb48258e606

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 85518506432722866777040326230024668837. Exactly this sequence comes out of new Random(190).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 35 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs · New results